Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B5B172CDFE911EF8113C595762E951A.roa
File: 0B5B172CDFE911EF8113C595762E951A.roa (raw, json)
Hash identifier: M34kQz7U8DquPFmRmDa3zitgwLt0q4T8aa8k3mLq1sQ=
Subject key identifier: D7:67:D4:62:DF:B4:F8:44:1E:D5:68:C7:39:F3:75:5A:9C:48:2E:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B5B172CDFE911EF8113C595762E951A.roa
Signing time: Fri 31 Jan 2025 15:35:48 +0000
ROA not before: Fri 31 Jan 2025 15:35:44 +0000
ROA not after: Sat 03 Jan 2026 15:35:44 +0000
asID: 40065
IP address blocks: 154.208.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85487 (0x14def)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 15:35:44 2025 GMT
Not After : Jan 3 15:35:44 2026 GMT
Subject: CN=679cedd4-62c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:c1:71:d0:19:62:17:c0:69:ea:88:e5:56:
b0:53:ea:27:41:11:d7:00:d6:9b:30:11:f5:9c:24:
d5:36:3c:d5:37:61:f9:dd:10:8f:e1:38:be:33:29:
ce:18:27:80:2e:57:9b:33:84:e6:26:d7:2a:18:23:
53:d3:fb:7e:ff:ce:66:50:6e:9d:84:cd:b8:d8:e8:
0d:8d:50:5d:ce:9a:0d:d4:f9:32:4d:f5:ce:65:50:
6d:31:c7:97:e7:11:41:3a:be:51:9f:39:2b:78:2e:
a1:ca:a9:1c:19:c5:11:cf:81:69:fd:8f:41:99:2e:
5c:de:26:7c:59:f1:ec:17:de:52:1b:d6:ec:4f:1f:
44:01:63:fc:53:ac:79:23:77:ba:5e:28:52:eb:5e:
c5:e6:32:d7:3e:fa:14:7d:16:45:53:20:af:6e:23:
0d:ab:69:2b:53:25:11:ce:cf:c2:ef:83:dd:09:5c:
75:6d:f4:4d:dd:9d:89:43:7d:ce:4b:1c:b8:eb:fc:
c5:af:e6:64:a7:f3:eb:f9:5a:df:e0:8b:18:74:eb:
31:c1:f4:ca:ee:1f:7a:ff:9a:7a:cc:97:dd:2f:84:
ef:4e:a5:87:72:83:51:b7:a5:91:cc:01:2e:30:6f:
c0:c7:f6:7c:0e:aa:95:c9:e6:f3:68:47:95:ad:f4:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:D4:62:DF:B4:F8:44:1E:D5:68:C7:39:F3:75:5A:9C:48:2E:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B5B172CDFE911EF8113C595762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.2.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:57:15:4d:a7:da:f9:de:ba:f7:0b:2e:58:46:77:e7:e4:a0:
70:3e:9c:a7:82:35:f1:da:75:71:b1:8f:22:1e:f5:f5:9c:a1:
6c:8d:0e:38:b0:0c:81:85:6b:e6:e6:ca:c8:d7:a5:16:36:aa:
f6:36:d0:98:ac:3f:d4:8f:e3:44:67:c8:4d:98:89:6f:ae:3e:
60:72:fa:56:e4:5e:3a:35:f2:e0:5d:74:59:0f:e5:57:4d:7c:
f5:fb:08:c7:f9:e7:e2:5d:29:22:dd:15:63:f8:5f:57:fb:0f:
11:59:c0:d0:e4:fe:63:1d:df:25:be:aa:e1:01:15:69:20:49:
ed:e5:e8:62:50:63:2a:c2:62:ac:6e:33:fa:c1:ae:fa:98:c1:
dc:ad:47:b7:5a:8c:a2:b9:60:56:0b:3b:fc:cf:38:40:ca:38:
5d:86:46:c2:4c:ca:f5:cb:e5:f1:1d:be:fb:87:62:6c:d7:ef:
ff:be:65:2e:85:b8:d0:d2:b9:05:20:f6:24:43:12:1d:be:07:
f1:d0:7f:31:b2:e8:2a:cc:4c:63:91:68:78:05:b4:c8:38:07:
0c:2a:0f:1c:72:c7:9d:f0:ad:f8:1a:ca:d3:61:61:28:a3:78:
44:00:ff:6f:6a:30:6e:f3:42:e1:f0:4b:b6:ec:35:a1:b1:90:
c3:93:d0:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU3vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTUzNTQ0WhcNMjYwMTAzMTUzNTQ0WjAYMRYw
FAYDVQQDEw02NzljZWRkNC02MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2HfBcdAZYhfAaeqI5VawU+onQRHXANabMBH1nCTVNjzVN2H53RCP4Ti+
MynOGCeALlebM4TmJtcqGCNT0/t+/85mUG6dhM242OgNjVBdzpoN1PkyTfXOZVBt
MceX5xFBOr5RnzkreC6hyqkcGcURz4Fp/Y9BmS5c3iZ8WfHsF95SG9bsTx9EAWP8
U6x5I3e6XihS617F5jLXPvoUfRZFUyCvbiMNq2krUyURzs/C74PdCVx1bfRN3Z2J
Q33OSxy46/zFr+Zkp/Pr+Vrf4IsYdOsxwfTK7h96/5p6zJfdL4TvTqWHcoNRt6WR
zAEuMG/Ax/Z8DqqVyebzaEeVrfRn+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNdn
1GLftPhEHtVoxznzdVqcSC45MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjVCMTcyQ0RGRTkxMUVGODExM0M1OTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtACMA0GCSqGSIb3DQEB
CwUAA4IBAQBKVxVNp9r53rr3Cy5YRnfn5KBwPpyngjXx2nVxsY8iHvX1nKFsjQ44
sAyBhWvm5srI16UWNqr2NtCYrD/Uj+NEZ8hNmIlvrj5gcvpW5F46NfLgXXRZD+VX
TXz1+wjH+efiXSki3RVj+F9X+w8RWcDQ5P5jHd8lvqrhARVpIEnt5ehiUGMqwmKs
bjP6wa76mMHcrUe3WoyiuWBWCzv8zzhAyjhdhkbCTMr1y+XxHb77h2Js1+//vmUu
hbjQ0rkFIPYkQxIdvgfx0H8xsugqzExjkWh4BbTIOAcMKg8ccsed8K34GsrTYWEo
o3hEAP9vajBu80Lh8Eu27DWhsZDDk9Cs
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:59 2025 by rpki-client